TZ
← All projectsTrezor

Trezor firmware

Firmware monorepo for Trezor One, Model T, and Safe devices.

BitcoinHardware walletsNormal
Repository coverage

2691 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

926security candidates315second-pass queue2669AI analyses
340commits · 30 days
557commits · 60 days
1349commits · 180 days
2621commits · 365 days
Backfill bands
Aug 5 → Feb 61298 seen115 candidatesComplete
Feb 6 → Jun 6775 seen58 candidatesComplete
Jun 6 → Jul 6217 seen13 candidatesComplete
Jul 6 → Aug 5360 seen54 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

66/100 average clarity
488Strong · 80–100
1332Adequate · 60–79
866Thin · 40–59
5Opaque · 0–39
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
tychovrahe292104292461
Roman Zeyde582183578272
PrisionMike945994273
Andrew Kozlik742572266
obrusvit21376213164
Jakub Janků22919182
Martin Pastyřík24823173
cepetr19782196059
Ioan Bizău23076230059
M1nd3r21173208071
Lukas Bielesch846784067
Martin Milata18146176063
Analysis record

Published AI watches

Last scanned 59 minutes ago

Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

chore: remove libtropic's pin to develop branch

This commit removes a single line from the project's Git submodule configuration. It stops pinning the libtropic submodule to the 'develop' branch, meaning the project will now use the submodule's default branch (likely 'main' or 'master')…

8290eeefby M1nd3r+0−11 file
No security note in commit
Low 37 AI analysisMessage 70 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core/embed): clear temporary buffer across Optiga/Tropic calls

This is a hardening change for the random number generator inside Trezor hardware wallets. It makes sure that temporary memory holding secret random values from the Optiga and Tropic security chips is wiped immediately after use, rather th…

Sensitive intermediate buffer not cleared promptlyPotential stale-buffer reuse across RNG source boundariesDefense-in-depth memory sanitization for secure-element entropy
01ebda93by Roman Zeyde+2−21 file
No security note in commit
Informational 15 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

test(core/ethereum): EIP-7702 tuple nonce must be non-zero

This commit only changes test data and expected screen fingerprints for Trezor's Ethereum EIP-7702 signing tests. It replaces one test case that used a nonce of 0 with the same scenario using a nonce of 67, because the real-world protocol …

Test-only change with no production code modificationEIP-7702 tuple nonce constraint reflected in test dataExpected UI test hashes regenerated for renamed test vector
76cd2ed4by Roman Zeyde+28−282 files
No security note in commit
Informational 15 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

test(core): drop an unused parameter of `make_payment_request()`

This commit only cleans up test code by removing an unused 'session' argument from a helper function used in automated tests. It does not change the actual Trezor firmware or any code that runs on the device, so it has no security impact f…

6dd19fdcby Roman Zeyde+0−188 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

build(core): propagate emulator feature from projects

This commit is a build-system cleanup for the Trezor firmware's Rust code. It changes how the 'emulator' feature flag is passed between different software components. The firmware project no longer supports the emulator feature (which make…

5642074cby matejcik+5−44 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(build-docker): stop swallowing pub-bin copy errors

This change fixes a build script that was ignoring copy errors. Previously, the script would silently ignore any failure when copying public binary files, which could hide real problems. Now it only skips the copy when the file genuinely d…

Build script silently ignored copy failures before this fixFix removes unconditional `|| true` error suppressionKnown-benign missing files are now explicitly skipped with a file existence check
d829eda8by Andrew Kozlik+4−11 file
No security note in commit
Low 27 AI analysisMessage 93 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core): digest EIP-1559/EIP-7702 magic without RLP encoding

This commit is a small internal cleanup in Trezor's Ethereum signing code. It changes how two special 'magic' bytes (the transaction type markers for newer Ethereum transaction formats) are fed into the cryptographic hash. Previously the c…

Refactor of cryptographic hashing path for Ethereum transaction signingRemoval of implicit assumption that RLP encodes small integers as single bytesChange affects EIP-1559 and EIP-7702 transaction type markers
2362bc6fby Roman Zeyde+6−32 files
No security note in commit
Informational 15 AI analysisMessage 98 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

test(core): test RLP self-encoding bytestrings

This commit only adds a new unit test to the Trezor firmware codebase. It verifies that very short Ethereum RLP-encoded byte strings and small positive integers encode to themselves, which is a known property of the RLP specification. No p…

41538733by Roman Zeyde+16−01 file
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

docs: fix links outside book root

This commit only fixes broken or awkward documentation links inside the project's user guide. It replaces relative links that point outside the documentation folder with internal placeholder files or direct GitHub URLs. There is no change …

0d8d4b1bby Martin Milata+14−810 files
No security note in commit
Informational 18 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): remove sha1 from regular FW

This commit removes the SHA-1 hashing function from the regular Trezor firmware. SHA-1 is an old, weak hash algorithm that is no longer considered secure for sensitive uses. The change deletes the code that exposes SHA-1 to apps running on…

Removal of a deprecated cryptographic primitive (SHA-1) from the firmware API surfaceReduction of attack surface and prevention of future misuse of a collision-vulnerable hashNo direct vulnerability patch or memory-safety bug is present in the diff
16d15774by M1nd3r+0−2006 files
No security note in commit
Low 27 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): pass static public key to `noise_xxpsk3_*_init()`

This commit changes how a cryptographic library sets up secure connections. Previously, the code automatically calculated the public key from the private key. Now, the caller must provide the public key directly. This is a code-quality ref…

Cryptographic key handling changed: public key is now supplied rather than derivedPotential reduction of key-mismatch risk if caller provides correct public keyNew null-pointer check added for static_public_key
1b3128a4by Ondřej Vejpustek+20−92 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): change order of parameters

This commit simply reorders the arguments of an internal function called dh() and updates every place that calls it. The actual math and security behavior are unchanged; it is a code cleanup with no security effect.

33a119eeby Ondřej Vejpustek+15−151 file
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): prefix enums

This commit simply renames two groups of internal status labels (called enums) in the Trezor firmware's cryptographic code. The old names like WAITING_FOR_REQUEST1 were shared between two different parts of the code, so the developer gave …

f1c74046by Ondřej Vejpustek+26−222 files
No security note in commit
Low 37 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(crypto): prevent calling `memzero(NULL, ...)`

This commit fixes three places in the Trezor firmware's cryptographic code where a memory-clearing function could be called with a NULL pointer. In practice, passing NULL to memzero is harmless on Trezor's platform (it does nothing), but i…

NULL pointer passed to memory-zeroing helper in cryptographic codeUndefined behavior in C standard library contractDefensive hardening in Noise protocol implementation
0394e934by Ondřej Vejpustek+11−51 file
No security note in commit
Informational 18 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): return remote static key from `noise_xxpsk3_*_handle_*()`

This commit is a code cleanup (refactor) for the cryptographic handshake code used in Trezor devices. It changes how the other party's long-term public key is returned to the caller: instead of storing it inside an internal state structure…

Removal of long-term public key storage from internal handshake stateCaller-supplied output buffer for remote static public key reduces internal secret retentionError-path memzero of returned key material on failure
3ead1aa6by Ondřej Vejpustek+79−423 files
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): rename ProjectProfile to ProjectConfig

This commit is a simple rename from 'ProjectProfile' to 'ProjectConfig' in two Rust source files. It only changes variable names, struct names, and error messages. There is no change to program logic, security behavior, or how data is hand…

581b37bcby cepetr+18−182 files
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): introduce ResolvedBuildArgs

This commit is a straightforward internal code refactor in Trezor's build tooling. It introduces a new ResolvedBuildArgs structure that centralizes default values for command-line build options before they are used. There is no change to u…

c24d1be8by cepetr+99−295 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): make build args tristate

This commit is a straightforward internal refactor of the Trezor firmware build tool's command-line argument handling. It changes many on/off flags from plain booleans to optional booleans so they can explicitly be set to true, false, or l…

271e249aby cepetr+57−561 file
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): introduce build options

This commit is a straightforward internal code reorganization in Trezor's build tooling. It moves build-option definitions from one Rust source file to a new module and adds the ability to load those options from a configuration file. Ther…

75085e2aby cepetr+275−2007 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(xtask): introduce build presets

This commit is a developer tooling change for the Trezor firmware build system. It introduces 'build presets'—named configuration bundles stored in TOML files—so developers can select common build settings with a single command-line flag i…

eefe8f7fby cepetr+397−419 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityfix(core): Fix broken Tropic initialization in prodtest.by Andrew Kozlik · 86869654 · Oct 8, 2025 · 1 fileMessage 85 · StrongLow 32Details
Commit message · Andrew Kozlik

fix(core): Fix broken Tropic initialization in prodtest.

Partially reverts 6cc6a8779a9a7bb002a76f87dda4d1ed3ff58c8b.

[no changelog]

(cherry picked from commit efcb0f1944c67742dd155c22a11c61cc51791a0a)

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Low 32/100

This commit fixes a bug in the factory testing tool (prodtest) for Trezor hardware wallets that use a Tropic secure chip. The previous code accidentally marked the Tropic chip as initialized even when initialization actually failed, and it also shut down the chip during cleanup even on success. The fix makes the success/failure status accurate and stops the premature shutdown, so production tests can run correctly.

Lower-priorityfix(core): Wait for Tropic to boot before trying to start session.by Andrew Kozlik · 8e483b5c · Oct 8, 2025 · 1 fileMessage 77 · AdequateLow 41Details
Commit message · Andrew Kozlik

fix(core): Wait for Tropic to boot before trying to start session.

[no changelog]

(cherry picked from commit aa8fc7b31b5afbb5343814276cf09a29f779667d)

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Low 41/100

This change fixes how the Trezor hardware wallet waits for a small security chip called 'Tropic' to finish booting before starting a secure session. Previously, the code used a fixed 100-millisecond delay, which could be too short and cause the chip to respond with 'busy' errors. Now it actively polls the chip for up to one second until it reports it is ready. This is a reliability and robustness improvement rather than a fix for a clear-cut exploitable vulnerability.

Lower-priorityfix(core): Wait for Tropic to boot before trying to start session.by Andrew Kozlik · aa8fc7b3 · Oct 8, 2025 · 1 fileMessage 62 · AdequateLow 46Details
Commit message · Andrew Kozlik

fix(core): Wait for Tropic to boot before trying to start session.

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Low 46/100

This commit fixes a timing issue in the Trezor hardware wallet's communication with the Tropic secure chip. Previously, the code simply waited a fixed 100 milliseconds and hoped the chip was ready. Now it actively polls the chip for up to 1 second, waiting until it responds as ready before starting a secure session. This reduces the chance that the chip is still busy when sensitive operations begin, which could otherwise cause failures or potentially unpredictable behavior.

Lower-priorityfix(core): Fix broken Tropic initialization in prodtest.by Andrew Kozlik · efcb0f19 · Oct 8, 2025 · 1 fileMessage 77 · AdequateLow 29Details
Commit message · Andrew Kozlik

fix(core): Fix broken Tropic initialization in prodtest.

Partially reverts 6cc6a8779a9a7bb002a76f87dda4d1ed3ff58c8b.

[no changelog]

77/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Low 29/100

This commit fixes a bug in the factory testing (prodtest) code for the Tropic secure chip on Trezor hardware wallets. A previous change accidentally made the Tropic chip appear uninitialized during secure session setup, which broke production tests. The fix restores correct tracking of whether the chip has been initialized, so the production line can reliably set up secure sessions.

AI review queuedchore(core): remove unused translations per layoutby obrusvit · 1b5250c7 · Oct 8, 2025 · 9 filesMessage 62 · AdequateInformational 15Details
Commit message · obrusvit

chore(core): remove unused translations per layout

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathtranslation-only discountsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine cleanup of translation strings in the Trezor firmware. It changes how some text labels are stored so that different device screen layouts (Bolt, Caesar, Delizia, Eckhart) can have their own versions of the same string, often leaving unused layouts with an empty string. There is no indication this fixes or introduces a security vulnerability.

Lower-prioritychore(core): update T3W1 dev secmonby tychovrahe · ef39e08c · Oct 8, 2025 · 2 filesMessage 57 · ThinInformational 3Details
Commit message · tychovrahe

chore(core): update T3W1 dev secmon

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 3/100

This commit replaces two precompiled binary files used for the T3W1 hardware model's secure monitor in development builds. The actual code changes cannot be seen because the files are binary blobs. There is no description of any security fix or vulnerability, and no independent references were provided.

Lower-priorityfeat(core): add compile time switch to disable power manager thermal control.by kopecdav · ab97ecd8 · Oct 8, 2025 · 3 filesMessage 62 · AdequateInformational 19Details
Commit message · kopecdav

feat(core): add compile time switch to disable power manager thermal control.

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 19/100

This commit adds a compile-time switch that lets developers turn off the battery-charging temperature limiter in Trezor's STM32U5 power manager. By default the thermal control stays enabled, so normal builds are unchanged. The change itself is a feature flag, not a fix for an active bug or vulnerability, and there is no claim that it addresses a security issue.

Security candidatechore(core): update T3W1 embedded bootloader QAby obrusvit · 40c7b026 · Oct 7, 2025 · 2 filesMessage 57 · ThinInformational 3Details
Commit message · obrusvit

chore(core): update T3W1 embedded bootloader QA

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
update trustboot or update path
AI analysis · Informational 3/100

This commit swaps in a newer QA (quality assurance) bootloader binary for the T3W1 hardware model and updates the matching hash table used by the firmware to recognize it. The change is labeled as a routine chore with no changelog entry. There is no information in the commit or supplied references indicating this fixes or introduces a security problem.

Lower-prioritychore: update releases.jsonby obrusvit · e4d0b61e · Oct 7, 2025 · 1 fileMessage 47 · ThinInformational 15Details
Commit message · obrusvit

chore: update releases.json

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply adds one new firmware version number (2.9.3) for one device model (T3W1) to a release metadata file. It does not change any code, fix any bug, or alter device behavior. There is no security relevance visible in the change itself.

Lower-prioritychore: update definitions timestampby obrusvit · 57d039b6 · Oct 7, 2025 · 2 filesMessage 47 · ThinInformational 15Details
Commit message · obrusvit

chore: update definitions timestamp

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply updates a timestamp and a matching version number used for Ethereum token/chain definitions. It is a routine metadata refresh with no code logic changes and no security relevance visible in the diff or commit message.

AI review queuedchore(core): pull some translations from Crowdinby obrusvit · f24354b9 · Oct 7, 2025 · 7 filesMessage 57 · ThinInformational 15Details
Commit message · obrusvit

chore(core): pull some translations from Crowdin

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathtranslation-only discountsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only updates translated user-interface text strings for Bluetooth-related screens in several language files. It adds labels like 'Apps connected', 'Host info', 'MAC Address', and 'Waiting for host' in Czech, German, Spanish, French, Italian, and Portuguese, and refreshes the translation signature metadata. There is no executable code change, no security fix, and no vulnerability introduced.

Lower-prioritychore(core): update fixturesby obrusvit · 8639b291 · Oct 7, 2025 · 1 fileMessage 47 · ThinInformational 15Details
Commit message · obrusvit

chore(core): update fixtures

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only updates expected test result hashes (called 'fixtures') in a single test data file. No actual firmware code, logic, or behavior was changed. It is a routine maintenance update to keep automated UI tests aligned with the current firmware output.

Security candidatechore(core/eckhart): update chunkfied text styleby Lukas Bielesch · 46fe1715 · Oct 7, 2025 · 4 filesMessage 57 · ThinInformational 15Details
Commit message · Lukas Bielesch

chore(core/eckhart): update chunkfied text style

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This is a routine user-interface styling update for the Trezor hardware wallet's newer 'Eckhart' screen layout. It changes how long text (such as cryptocurrency addresses) is broken into chunks and how pagination hints are shown. There is no indication of any security bug or vulnerability being fixed.

Security candidatefeat(core/eckhart): automatic hint counter for textscreenby Lukas Bielesch · 6549a1de · Oct 7, 2025 · 2 filesMessage 62 · AdequateInformational 15Details
Commit message · Lukas Bielesch

feat(core/eckhart): automatic hint counter for textscreen

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit adds an automatic page counter hint to a text screen UI component in the Trezor firmware. It is a user-interface feature change, not a security fix or vulnerability. There is no indication it addresses any security issue.

Security candidatechore(core/eckhart): increase padding between description and contentby Lukas Bielesch · a2761970 · Oct 7, 2025 · 2 filesMessage 62 · AdequateInformational 15Details
Commit message · Lukas Bielesch

chore(core/eckhart): increase padding between description and content

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit is a purely cosmetic UI adjustment for the Trezor hardware wallet's 'Eckhart' layout. It increases the spacing between descriptive labels and their content on the receive-crypto screen, replacing hard-coded padding numbers with shared theme constants. There is no security relevance.

Security candidatefix(core): clippy warningsby Lukas Bielesch · 23ce86b0 · Oct 7, 2025 · 2 filesMessage 47 · ThinInformational 15Details
Commit message · Lukas Bielesch

fix(core): clippy warnings

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit removes two unused Rust import statements (`Insets` and `fonts`) and one unused import group (`text::TextStyle`) from UI source files. It is a routine cleanup triggered by the Clippy linter to eliminate compiler warnings. There is no functional code change and no security relevance.

Security candidatefeat(core/eckhart): use different text in Progressby obrusvit · 6219c192 · Oct 7, 2025 · 5 filesMessage 62 · AdequateInformational 15Details
Commit message · obrusvit

feat(core/eckhart): use different text in Progress

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit is a routine user-interface layout tweak for the Trezor hardware wallet's Eckhart design. It changes how text is positioned on progress screens (for example, 'Signing transaction...' and 'Please wait') and moves some shared layout constants into a common theme file. There is no security-relevant change here.

Security candidatefeat(core/eckhart): remove percentage from loadersby obrusvit · 527dec7e · Oct 7, 2025 · 1 fileMessage 62 · AdequateInformational 15Details
Commit message · obrusvit

feat(core/eckhart): remove percentage from loaders

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit removes the on-screen percentage number from loading/progress indicators in the Trezor hardware wallet's user interface. It is a cosmetic UI change only and does not alter security logic, cryptography, or how data is handled.

Lower-prioritychore(core): update fixturesby obrusvit · d69e262a · Oct 7, 2025 · 1 fileMessage 47 · ThinInformational 15Details
Commit message · obrusvit

chore(core): update fixtures

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only updates expected test result hashes (called 'fixtures') in a single test data file. No actual product code was changed, so it cannot introduce or fix a security vulnerability on its own. The hash changes likely reflect an earlier code or test update that altered screen output for the T3W1 device.

AI review queuedfeat(core/eckhart): progress copy to use ellipsisby obrusvit · e301c5a6 · Oct 7, 2025 · 8 filesMessage 57 · ThinInformational 15Details
Commit message · obrusvit

feat(core/eckhart): progress copy to use ellipsis

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathtranslation-only discountsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only changes user-facing text strings. It adds an ellipsis (three dots) to progress messages like "Please wait" and "Processing" for the new "Eckhart" device layout, while keeping the old wording for older layouts. It also updates the translation files and their cryptographic signature metadata. There is no code behavior change and no security relevance.

Security candidatefeat(core): host afueraby obrusvit · d776fac0 · Oct 7, 2025 · 16 filesMessage 63 · AdequateInformational 15Details
Commit message · obrusvit

feat(core): host afuera

- removes the occurences of "host" and instead using something more
user-friendly like "app" or "connected device"

[no changelog]

63/100 · AdequateMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathboot or update path
AI analysis · Informational 15/100

This commit only rewords user-facing text in the Trezor firmware. It replaces the technical word 'host' with friendlier terms like 'app', 'connected device', or 'connection' across on-screen messages, translations, and test snapshots. There is no change to security logic, permissions, or behavior.

Security candidatechore(core): remove Japan from regulatory screenby obrusvit · e7e3a4b8 · Oct 7, 2025 · 3 filesMessage 72 · AdequateInformational 15Details
Commit message · obrusvit

chore(core): remove Japan from regulatory screen

- temporarily remove the regulatory screen for Japan until the
certification process is completed

[no changelog]

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit removes Japan from a device menu screen that displays regulatory certification information. It is a routine product compliance change, not a security fix. There are no code changes that affect cryptography, authentication, or how the device protects funds or data.

Security candidatechore: remove unusued importby obrusvit · 5ca87c69 · Oct 7, 2025 · 1 fileMessage 47 · ThinInformational 15Details
Commit message · obrusvit

chore: remove unusued import

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This is a trivial code cleanup: a single unused import was removed from a Rust source file. It has no functional or security effect on the Trezor firmware.

Security candidatefeat(core/eckhart): pin and wipe code device menu testsby Lukas Bielesch · 2cb2f9dc · Oct 7, 2025 · 12 filesMessage 72 · AdequateInformational 15Details
Commit message · Lukas Bielesch

feat(core/eckhart): pin and wipe code device menu tests

[no changelog]

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
access controlsigning or wallet pathauthentication path
AI analysis · Informational 15/100

This commit adds and updates automated user-interface tests for the PIN and wipe-code menus on the Trezor Safe 7 (Eckhart) hardware wallet. It also renames some Spanish translation strings for consistency. There is no change to the firmware's security logic, cryptography, or device behavior—only test code and translations are modified.

Lower-priorityfix(core): reset settings on wallet wipeby tychovrahe · 133d138a · Oct 7, 2025 · 1 fileMessage 57 · ThinLow 33Details
Commit message · tychovrahe

fix(core): reset settings on wallet wipe

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Low 33/100

This commit fixes a bug where wiping a Trezor wallet did not reset all device settings. Previously, settings like haptic feedback, RGB LED, Bluetooth, and experimental features could remain enabled or disabled based on the old wallet's preferences instead of being reloaded from storage after a wipe. The fix makes sure these settings are reloaded when the wallet is reset, so the device behaves consistently with a fresh state.